Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/w4lV8ilIrkyWkrjlxVgcFXHlnb4.roa
File:                     w4lV8ilIrkyWkrjlxVgcFXHlnb4.roa (raw, json)
Hash identifier:          h8GODfMQa3JZtWMOcHYaVvuqAzxI5TpoSDmzmi+9d/A=
Subject key identifier:   C3:89:55:F2:29:48:AE:4C:96:92:B8:E5:C5:58:1C:15:71:E5:9D:BE
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       04
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/w4lV8ilIrkyWkrjlxVgcFXHlnb4.roa
Signing time:             Thu 17 Jun 2021 09:41:57 +0000
ROA not before:           Thu 17 Jun 2021 09:41:57 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     24277
IP address blocks:        115.166.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 17 09:41:57 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=C38955F22948AE4C9692B8E5C5581C1571E59DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:96:f7:62:f3:b8:a8:bd:57:94:b2:8d:3e:
                    71:f1:96:15:8f:ca:bf:e3:39:a4:ed:70:43:60:aa:
                    cf:b2:d6:3a:f3:a8:bf:31:41:e5:73:aa:9a:6c:b7:
                    bb:6d:de:70:f9:f6:5f:d6:bf:e1:bd:52:50:78:c5:
                    3d:b3:b9:52:53:f2:b6:ae:13:86:f9:31:c1:48:83:
                    bd:da:19:40:02:8a:93:80:78:9b:a3:e1:b1:97:7e:
                    f6:37:4d:8f:8b:de:cf:ad:0c:79:85:ce:0a:81:37:
                    a5:61:2b:7a:04:02:f2:3c:b8:4a:1f:b4:57:dd:fb:
                    a5:ad:e5:7a:a5:bc:56:21:fd:22:5d:af:57:0a:1b:
                    84:ed:44:36:1c:a5:e3:d1:da:8b:3c:f8:58:ed:04:
                    64:fb:f1:45:37:16:a9:11:14:6b:af:16:f4:b2:a5:
                    37:37:48:e6:34:12:19:5d:15:e0:98:78:7f:b6:c9:
                    3c:5e:02:1d:74:11:9a:b0:5a:63:aa:0e:85:0a:bc:
                    e3:ac:90:fe:6d:67:3c:8b:db:32:5f:63:bd:70:7d:
                    b3:09:21:6a:43:5b:c6:41:35:9f:e7:35:56:94:82:
                    99:39:f6:cb:72:0e:6d:d6:fb:6a:5f:ac:dc:d1:22:
                    cb:3c:05:05:49:c3:39:6f:aa:e1:d4:c5:e1:93:ca:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:89:55:F2:29:48:AE:4C:96:92:B8:E5:C5:58:1C:15:71:E5:9D:BE
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/w4lV8ilIrkyWkrjlxVgcFXHlnb4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:4c:e5:a2:ab:44:61:d5:70:99:0d:60:fc:55:40:f3:63:
         7b:ee:82:32:8e:68:35:66:92:db:14:63:8e:f2:06:b9:88:f9:
         9b:08:24:b9:7c:14:c6:b7:5b:ac:ed:1a:73:3b:5f:01:ba:26:
         f0:26:e9:5c:d5:25:12:d1:71:96:e9:52:8a:b9:ad:b1:df:15:
         82:ab:f6:12:0e:fc:57:5a:c6:57:92:cf:00:43:68:4d:07:25:
         5e:87:a6:19:49:2a:30:d5:0c:88:cf:50:e8:31:66:9b:d0:84:
         14:c3:6b:26:39:96:31:80:ea:3f:88:7e:2d:3e:ea:6e:fc:5b:
         66:c2:0d:76:43:66:47:47:bf:05:d5:fe:3b:25:81:68:af:12:
         9b:a4:8f:0a:b7:87:60:62:a9:b0:6c:de:47:ca:48:48:56:ab:
         b4:5a:2a:3e:4d:1a:52:47:ae:61:1c:b3:74:c3:4d:af:19:53:
         b0:5f:e9:58:95:d8:76:e0:52:08:7f:cb:80:90:a8:3f:e4:da:
         24:60:46:d3:41:66:76:02:c9:d2:ef:de:1b:3d:8c:cb:3e:c1:
         dd:79:5f:12:6c:ab:96:66:d9:37:92:96:66:8d:17:57:17:8e:
         e9:69:e1:aa:30:02:d9:62:29:3d:b5:87:66:b6:ca:7f:7e:57:
         2f:71:d7:16
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIxMDYxNzA5
NDE1N1oXDTIyMDYxNTAxMzAwM1owMzExMC8GA1UEAxMoQzM4OTU1RjIyOTQ4QUU0
Qzk2OTJCOEU1QzU1ODFDMTU3MUU1OURCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMFilvdi87iovVeUso0+cfGWFY/Kv+M5pO1wQ2Cqz7LWOvOovzFB
5XOqmmy3u23ecPn2X9a/4b1SUHjFPbO5UlPytq4ThvkxwUiDvdoZQAKKk4B4m6Ph
sZd+9jdNj4vez60MeYXOCoE3pWEregQC8jy4Sh+0V937pa3leqW8ViH9Il2vVwob
hO1ENhyl49Haizz4WO0EZPvxRTcWqREUa68W9LKlNzdI5jQSGV0V4Jh4f7bJPF4C
HXQRmrBaY6oOhQq846yQ/m1nPIvbMl9jvXB9swkhakNbxkE1n+c1VpSCmTn2y3IO
bdb7al+s3NEiyzwFBUnDOW+q4dTF4ZPKgxcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTDiVXyKUiuTJaSuOXFWBwVceWdvjAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDYzL3c0bFY4aWxJcmt5V2tyamx4VmdjRlhIbG5iNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARzpsAwDQYJKoZIhvcNAQELBQAD
ggEBAHJaTOWiq0Rh1XCZDWD8VUDzY3vugjKOaDVmktsUY47yBrmI+ZsIJLl8FMa3
W6ztGnM7XwG6JvAm6VzVJRLRcZbpUoq5rbHfFYKr9hIO/FdaxleSzwBDaE0HJV6H
phlJKjDVDIjPUOgxZpvQhBTDayY5ljGA6j+Ifi0+6m78W2bCDXZDZkdHvwXV/jsl
gWivEpukjwq3h2BiqbBs3kfKSEhWq7RaKj5NGlJHrmEcs3TDTa8ZU7Bf6ViV2Hbg
Ugh/y4CQqD/k2iRgRtNBZnYCydLv3hs9jMs+wd15XxJsq5Zm2TeSlmaNF1cXjulp
4aowAtliKT21h2a2yn9+Vy9x1xY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org